Svchost.exe koriste velike količine RAM-a?

**d0od** · #1 17 svi 2008, 13:07

Hej os je to normalna za instancu Svchost.exe [in vidik 64] na korištenje samo pod 200, 000 K RAM-a?

Siguran sam da to nikada nije ovo puno prije ... Prošli tjedan ili tako sam primjetio da je bio prilično visok.

Imam instalirano 4GB RAM-a, tako da to nije "zahvatio" moj performanse po sebi, ali to ne znači da je točno, zar ne?

Kad kliknem "idi na service (s)" It's koristeći sljedeće:

WPDBusEnum
WLansvc
WdiSystemHost
Wudfsvc
UxSms
TrkWks
TabletINputService
SysMain
PcsSvc
Netman
hidserv
AudioEndpointBuilder

virus [avira antivir i avast! ] I spyware [Spybot] scan pokazuju ništa nepovoljan.

Je li normalni? Bilo koji način da ga dolje?

COS moje uobičajene uporabe u mem vidik je oko 24% sa ništa otvoriti, a oko 32% sa Firefox, MSN, i nekoliko Adobe Air apps otvoren, ali sam primijetio je oko 35% neprisutan sada, a gotovo 40% sa samo krijesnica otvoriti.

"hmmm"

Bilo koji savjet / stručnosti dobrodoąlice momački [i guyettes!]

**evilfantasy** · #2 17 svi 2008, 13:33

Quote:

virus [avira antivir i avast! ]

Ne biste nikada trebali pokrenuti dva AV-a u isto vrijeme.

----------

Preuzmite i preimenovanje HijackThis (HJT)

Dvaput kliknite na HJTInstall.
Kliknite na Instalacija gumb.
Bit će automatski HJT mjesto u C: \ Program Files \ TrendMicro \ HijackThis \ HijackThis.exe
Nakon instaliranja, HijackThis trebali otvoriti za vas.
- Zatvoriti HijackThis i preimenovati ga.
- Idi na C: \ Program Files \ Trend Micro \HijackThis.exe
- Desnom tipkom miša kliknite na HijackThis.exe i odaberite Preimenovanje
- Upišite sniper.exe i pritisnite Enter
- Desnom tipkom miša kliknite na sniper.exe i odaberite Pošalji na > Desktop (stvoriti prečac)
Iz otvorenih Hijackthis desktop.
Ako koristite Windows Vista, Desni klik i Pokreni kao administrator
Kliknite na Da li je sustav skenirati i spremanje log datoteku
Hijackthis će skenirati a zatim i prijava će se otvoriti u Notepad.
Kopirajte i zalijepite onda cijeli sadržaj se prijaviti u vaš post.
- Ne Hijackthis su riješili ništa još. Većina onoga što će se pronađe bezopasni ili čak obavezna.

Napomena: Iako smo Preimenovali Hijackthis da snajper, mi ćemo i dalje se odnosi na to kako je Hijackthis ili HJT.

**d0od** · #3 17 svi 2008, 13:44

JA dont 'trčanje dva virus skenira u isto vrijeme, ja pravedan instaliran novi, a ponekad i trčanje jedno ili drugo - ili u slučaju da je "problem" oba - ali odvojeno.

anyway, evo ga!
---
Ja Logfile of Trend Micro HijackThis v2.0.2
Scan spremljena u 9:43:14 Na 5/17/2008
Platforma: Windows Vista SP1 (Winnt 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Pokretanje procesa:
C: \ Windows \ SysWOW64 \ conime.exe
C: \ Program Files (x86) \ Windows Live \ Messenger \ msnmsgr.exe
C: \ Program Files (x86) \ Internet Explorer \ iexplore.exe
C: \ Program Files (x86) \ Common Files \ Microsoft Shared \ Windows Live \ WLLoginProxy.exe
C: \ Program Files (x86) \ Mozilla Firefox 3 Beta 5 \ firefox.exe
C: \ Program Files (x86) \ Trend Micro \ HijackThis \ HijackThis.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Postavke, ProxyOverride = *. lokalne
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
O1 - Hosts::: 1 localhost
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files (x86) \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O4 - HKCU \ .. \ Run: [Sidebar] C: \ Program Files \ Windows Sidebar \ sidebar.exe / Autorun
O4 - HKCU \ .. \ Run: [ehTray.exe] C: \ Windows \ ehome \ ehTray.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-19 \ .. \ Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O13 - smolastoga Prefiks:
O16 - DPF: (0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75) (CKAVWebScan Object) -- http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C: \ Program Files (x86) \ Yahoo! \ Common \ Yinsthelper.dll
O16 - DPF: (4A85DBE0-BFB2-4119-8401-186A7C6EB653) -- http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: (B8BE5E93-A60C-4D26-A2DC-220313175592) (MSN Games - Installer) -- http://messenger.zone.msn.com/binary...o.cab56649.cab
O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: (E6187999-9FEC-46A1-A20F-F4CA977D5643) (ZoneChess Object) -- http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: (F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8) (GoPetsWeb Control) -- https: / / secure.gopetslive.com / dev / GoPetsWeb.cab
O18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ programa ~ 2 \ UOBIČAJENA ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O23 - Service: @% SystemRoot% \ system32 \ Alg.exe, -112 (ALG) - Unknown vlasnika - C: \ Windows \ System32 \ alg.exe (file missing)
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C: \ Program Files (x86) \ Avira \ AntiVir PersonalEdition Classic \ sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C: \ Program Files (x86) \ Avira \ AntiVir PersonalEdition Classic \ avguard.exe
O23 - Service: @ keyiso.dll, -100 (KeyIso) - Unknown vlasnika - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @ comres.dll, -2797 (MSDTC) - Unknown vlasnika - C: \ Windows \ System32 \ msdtc.exe (file missing)
O23 - Service: @% SystemRoot% \ System32 \ netlogon.dll, -102 (Netlogon) - Unknown vlasnika - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @% SystemRoot% \ System32 \ psbase.dll, -300 (ProtectedStorage) - Unknown vlasnika - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @% SystemRoot% \ System32 \ Locator.exe, -2 (RpcLocator) - Unknown vlasnika - C: \ Windows \ system32 \ locator.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ samsrv.dll, -1 (SamSs) - Unknown vlasnika - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ SLsvc.exe, -101 (slsvc) - Unknown vlasnika - C: \ Windows \ system32 \ SLsvc.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ snmptrap.exe, -3 (SNMPTRAP) - Unknown vlasnika - C: \ Windows \ System32 \ snmptrap.exe (file missing)
O23 - Service: @% systemroot% \ system32 \ spoolsv.exe, -1 (red čekanja) - Unknown vlasnika - C: \ Windows \ System32 \ spoolsv.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ ui0detect.exe, -101 (UI0Detect) - Unknown vlasnika - C: \ Windows \ system32 \ UI0Detect.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ vds.exe, -100 (vds) - Unknown vlasnika - C: \ Windows \ System32 \ vds.exe (file missing)
O23 - Service: @% SystemRoot% \ System32 \ vssvc.exe, -102 (VSS) - Unknown vlasnika - C: \ Windows \ system32 \ vssvc.exe (file missing)
O23 - Service: @% SystemRoot% \ System32 \ wbem \ wmiapsrv.exe, -110 (wmiApSrv) - Unknown vlasnika - C: \ Windows \ system32 \ wbem \ WmiApSrv.exe (file missing)
O23 - Service: @% ProgramFiles% \ Windows Media Player \ wmpnetwk.exe, -101 (WMPNetworkSvc) - Unknown vlasnika - C: \ Program Files (x86) \ Windows Media Player \ wmpnetwk.exe (file missing)

--
End of file - 6072 bytes

**evilfantasy** · #4 17 svi 2008, 14:02

Jeste Hijackthis ovo popraviti O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)

----------

Evo nekoliko ideja za probati. http://www.roundtripsolutions.com/bl...of-svchostexe/

**d0od** · #5 17 svi 2008, 16:23

hvala, to je niža nego što je to - i ljevkasto dovoljno otkrio sam da je članak o Googleu, a leđa i onemogućeno automatsko ažuriranje koje smanjili malo previše.

**serverguy** · #6 17 svi 2008, 17:44

Drago mi je prestao biti tako pohlepan.

Mislim da je jedini način da se zaustavi real je instalirati. Imam nijedan ideja zašto on vozi luda ponekad ipak.

Da, onemogućivanju Auto Updates to malo pomogne. Dovoljno je zapamtiti da ostanu na vrhu ažuriranja.

**d0od** · #7 18 svi 2008, 09:01

Da li to ostati na vrhu nadogradnje, mahom iz dosade lol.

U svakom slučaju, to je pomoću 152, 540 ~ K sada ... ali sve više osjeća uzvratni nego prije, a na čizma gore - neprisutan RAM-a je na "normalnom" 24%.

Side note, se bilo tko drukčije mrziti kada pritisnete ctrl + alt + del vidik u mogućnosti to popuštanje te umjesto dovođenja gore Task Manager automatski? * gunđati *

**evilfantasy** · #8 18 svi 2008, 10:25

Desni klik na zadatak bar otvara kontekst meni, koji ima Task Manager kao opciju.

**serverguy** · #9 18 svi 2008, 10:48

Quote:

Originally Posted by d0od

Side note, se bilo tko drukčije mrziti kada pritisnete ctrl + alt + del vidik u mogućnosti to popuštanje te umjesto dovođenja gore Task Manager automatski? * gunđati *

Pokušajte udaranje Ctrl + Gurati + Esc

**d0od** · #10 18 svi 2008, 16:18

Haha Awesome! Znao sam da je na traci izbornika [kako ja obično koriste] ali novi Ctrl + Shift + ESC je shizzle! : D

[gawwwd sam glupan]